Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier: 0ugD+KlNI6xIE9u/Q7xYlL9p3BSPOGsg1tI01hDTJ6Q=
Subject key identifier: 67:CB:24:A3:E5:C9:D3:8B:F0:67:D3:C3:AE:7D:A7:F3:8F:94:15:69
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 01983081B8EF11155B5696014E851AE6546C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number: 111D
Signing time: Tue 22 Jul 2025 05:01:04 +0000
Manifest this update: Tue 22 Jul 2025 05:01:04 +0000
Manifest next update: Wed 23 Jul 2025 05:01:04 +0000
Files and hashes: 1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: Fmf7kRdVrinPf1QH4w7a//n2DACYTo/CbDaHCu6UvBg=)
2: SAF1KbjuvZdI9BSVM80ADIZ6zn0.roa (hash: wfp9L/QbKQTs8wDMXGcfyHh9p8y5+4/kclZuUrsUs5I=)
3: jOqd2wJBuE3wT3pRawlL9knhjV8.roa (hash: pvOd4te8ScnLLx0JwvYK3xwrNCWYubvf6Z+FLbM/DCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:81:b8:ef:11:15:5b:56:96:01:4e:85:1a:e6:54:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Jul 22 05:01:04 2025 GMT
Not After : Jul 23 05:01:04 2025 GMT
Subject: CN=67cb24a3e5c9d38bf067d3c3ae7da7f38f941569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:7a:5e:80:3a:6e:0c:f6:cf:67:fa:ed:a5:
e3:71:8d:9c:69:ef:5d:a6:4e:11:28:d7:b4:58:c8:
c2:70:49:bc:ec:91:02:e7:72:b6:8d:5a:61:e0:36:
d3:e0:c8:67:97:e0:ab:41:2c:43:f1:ce:a7:46:09:
14:2c:83:5e:dd:ee:4c:99:bc:2b:46:d5:49:eb:ed:
9a:4c:4f:1f:55:9d:bb:cf:3c:2c:8d:d6:90:4f:8a:
30:29:3f:a7:39:79:5c:5a:47:e1:c6:c8:e7:13:be:
15:7b:31:7e:c2:99:07:cf:f9:9f:8d:33:67:95:20:
a8:27:19:2d:b5:ca:ef:8e:01:ef:c1:12:cc:84:f3:
97:15:07:c7:df:08:6d:d7:e3:5e:27:e3:a7:13:ff:
26:ae:48:ac:de:9b:6f:cd:d2:55:f7:c4:3b:de:4d:
7e:b4:eb:53:fc:f7:03:fe:04:6b:08:e2:81:ec:13:
fb:74:12:4f:88:17:c0:db:d0:f9:bb:9b:72:04:dd:
c9:30:be:60:33:c0:1c:3b:81:b9:dd:f8:1f:83:1b:
71:05:a4:87:0a:9b:ea:f2:f0:fc:01:d9:9b:48:dc:
ba:12:2e:2d:2f:7b:8d:6c:80:6c:b9:47:f3:e7:d2:
33:7f:7b:ef:7f:15:a7:26:b9:4f:27:03:a4:43:0b:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CB:24:A3:E5:C9:D3:8B:F0:67:D3:C3:AE:7D:A7:F3:8F:94:15:69
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:38:d8:c6:fe:d2:fe:d6:09:a4:b5:60:64:40:39:3b:d7:ba:
88:0a:0e:26:01:9f:d9:66:02:6f:5b:9d:01:97:04:d5:2b:13:
d0:c0:c5:44:b5:6a:03:ca:e8:ac:87:19:c0:61:23:84:28:01:
ce:90:63:84:18:c4:fb:d1:72:8c:e1:b3:43:b8:86:3b:ac:d2:
94:e2:59:54:c3:52:23:ce:9d:ba:92:58:73:89:b6:e1:0e:89:
e2:80:9d:80:5d:36:d3:ba:ac:53:f8:d2:1d:11:60:08:80:7f:
6f:5f:72:18:ec:67:22:eb:60:db:57:2b:96:ff:c1:83:f2:a8:
51:10:59:87:1a:b3:18:a8:c5:7b:b7:aa:2a:7e:c6:fb:2b:54:
cd:01:95:09:e8:61:10:6a:d7:78:b8:63:4b:26:c2:14:1c:07:
77:06:a2:1f:a2:f8:57:4b:60:04:62:62:0f:ab:7f:70:a4:ee:
c3:ca:2f:01:c1:02:7d:e4:ab:ac:34:8c:9e:e5:75:fa:b1:45:
75:fb:7c:dc:b7:0a:30:e0:b6:8d:35:33:4a:a9:86:01:04:1d:
ec:78:40:74:3e:f5:e2:29:62:f8:2f:1d:4b:fe:6a:45:35:62:
a4:4f:64:00:1e:86:01:1c:cc:d7:61:ad:98:76:ce:da:1e:38:
68:2d:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:19 2025 by rpki-client